How to Manage Saved Passwords and Passkeys in Microsoft Edge Wallet

Modern web security is undergoing a fundamental transition away from vulnerable, reused text passwords toward passwordless cryptographic authentication based on FIDO2 and WebAuthn standards. Microsoft Edge centralises this security infrastructure within Microsoft Edge Wallet, an integrated credential vault built directly into the browser. Beyond standard password autofill, Edge Wallet manages hardware-bound passkeys, cryptographic public/private key pairs, credit card details, and multi-factor authentication tokens. Learning how to navigate and manage Edge Wallet allows users to audit credential health, register passkeys, and protect authentication keys with biometric Windows Hello security.

What Are Passkeys and How Does Microsoft Edge Manage Them?

Passkeys represent a phishing-resistant alternative to traditional passwords. When you create a passkey for an online account (such as Google, Microsoft, GitHub, or Amazon), Edge coordinates with your operating system to generate a unique cryptographic key pair:

• Public Key: Stored on the remote service’s authentication server.
• Private Key: Secured locally on your hardware device within the Windows Trusted Platform Module (TPM) or encrypted Apple Secure Enclave on macOS.

When you log in, Microsoft Edge uses the private key to sign a cryptographic challenge sent by the server, authenticating you instantly via Windows Hello (facial recognition, fingerprint scan, or PIN) without transmitting secret credentials over the internet. Edge Wallet provides a central management interface where these passkeys and traditional passwords can be reviewed, edited, and audited.

Accessing Edge Wallet and Password Settings

To access the credential manager inside Microsoft Edge:

1. Launch Microsoft Edge.
2. Click the Settings and more icon (three horizontal dots in the upper-right corner) and select Settings.
3. In the left-hand navigation pane, select Profiles.
4. Click Microsoft Wallet (or click Passwords under your profile). Alternatively, type edge://wallet/passwords directly into the address bar and press Enter.

The Passwords & Passkeys dashboard displays every registered web credential associated with your active Microsoft profile.

Managing Saved Website Passwords

Within the Passwords list, you can inspect and modify existing login credentials:

• Viewing Passwords: Click the eye icon next to any masked password. Windows prompts you for your local Windows Hello PIN or fingerprint to verify physical device ownership before displaying the plain-text password.
• Editing Credentials: Click the three-dot menu next to a saved account and select Edit. You can update username fields, revise changed passwords, or add custom notes.
• Deleting Credentials: To purge obsolete accounts, select Delete from the action menu. If your browser synchronises across devices, deleting an entry here purges it across all mobile and desktop instances attached to your Microsoft account.

Auditing Password Security with Password Monitor

Edge Wallet incorporates an automated security scanner known as Password Monitor. Located at the top of the passwords interface, this tool cross-references your saved passwords against known public data breaches and credential stuffing dumps.

The dashboard categorises accounts into:

• Leaked Passwords: Credentials detected in public database breaches that require immediate changing.
• Reused Passwords: Passwords utilised across multiple web services, presenting lateral account takeover risks.
• Weak Passwords: Short or predictable strings susceptible to brute-force attacks.

Clicking Change next to any flagged entry directs you to the service’s password reset portal, with Edge offering to generate a high-entropy randomised password automatically.

Viewing and Managing Registered Passkeys

Websites where you have configured cryptographic passwordless access display a distinctive Passkey badge alongside the account entry:

1. In the edge://wallet/passwords view, locate accounts marked with the key-and-shield icon.
2. Click the entry to view passkey metadata, including the date created and the authentication method (e.g. Windows Hello or Security Key).
3. If you need to revoke a passkey—for example, before decommissioning a shared PC—click the three-dot menu and select Delete passkey.

Once deleted, you will need to authenticate using a backup method (such as an authenticator app) next time you log into that service, where you can generate a fresh passkey bound to your new device.

Enforcing Primary Password and Biometric Authentication for Autofill

To prevent unauthorized individuals from using your computer while unlocked to automatically log into your bank or email accounts, you can enforce mandatory biometric authentication before Edge autofills credentials:

1. In Edge Wallet settings, scroll to Sign in options.
2. Locate the setting labelled Require device password before filling website passwords.
3. Select Always (or choose Once every minute).

With this protection enabled, whenever an autofill prompt appears on a login page, Edge requires a quick fingerprint touch or Windows Hello PIN confirmation before injecting credentials, adding a critical physical barrier to browser security.